Page 2
ORing warrants that all ORing products are free from defects in material and workmanship for a specified warranty period from the invoice date (5 years for most products). ORing will repair or replace products found by ORing to be defective within this warranty period, with shipment expenses apportioned by ORing and the distributor.
IGPS-9080 Series User Manual Table of Content Getting Started ....................6 About the IGPS-9080 Series..................6 Software Features ......................6 Hardware Specifications ....................7 Hardware Overview ..................8 Front Panel ........................8 Front Panel LED ......................9 Top Panel........................9 Rear Panel ........................
Page 4
IGPS-9080 Series User Manual Basic Settings....................35 5.1.1 System Information ..................35 5.1.2 Admin & Password ..................36 5.1.3 Authentication Methods .................. 37 5.1.4 IP Settings ...................... 37 5.1.5 IPv6 Settings ....................38 5.1.6 Daylight Saving Time ..................40 5.1.7 HTTPS ......................
Page 5
IGPS-9080 Series User Manual Traffic Prioritization ..................78 5.6.1 Storm Control ..................... 78 5.6.2 Port Classification ..................79 5.6.3 Port Tag Remaking ..................81 5.6.4 Port DSCP ....................81 5.6.5 Policing ...................... 83 Queue Policing ....................... 84 5.6.7 Scheduling and Shaping ................84 5.6.8...
With a wide operating temperature from -40 C to 70 C, the device can be managed centrally via ORing’s proprietary Open-Vision platform as well as via Web-based interfaces, Telnet and console (CLI). 1.2 Software Features Supports Open-Ring interoperates with other vendors’ ring technology in open architecture Supports O-Ring (recovery time <...
IGPS-9080 Series User Manual Supports ACL, TACACS+ and 802.1x user authentication Supports 9.6K bytes Jumbo frame Multiple notifications during unexpected events Configuration via Web-based ,Telnet, Console (CLI), and Windows utility (Open-Vision) Supports LLDP Protocol 1.3 Hardware Specifications Redundant DC power inputs 8 x 10/100/1000Base-T(X) P.S.E ports...
IGPS-9080 Series User Manual ardware Overview 2.1 Front Panel The series included four models: Model Name Description IGPS-9080 Standard functions with IEEE 1588v2 clock synchronization support IGPS-9080-NP Standard functions without IEEE 1588v2 clock synchronization support Standard functions with IEEE 1588v2 clock synchronization support and P.S.E., 24VDC...
IGPS-9080 Series User Manual 2.2 Front Panel LED Color Status Description Green DC power on Green DC power module 1 activated Green DC power module 2 activated Green Device operating in Ring Master mode Ring enabled Ring Green Blinking Ring structure is broken Errors occur (i.e.
IGPS-9080 Series User Manual 2.4 Rear Panel On the rear panel of the switch sit three sets of screw holes. The two sets placed in triangular patterns on both ends of the rear panel are used for wall-mounting (red boxes in the figure below) and the set of four holes in the middle are used for Din-rail installation (blue box in the figure below).
IGPS-9080 Series User Manual ardware Installation 3.1 DIN-Rail Installation The switch has a DIN-Rail kit on the rear panel. The DIN-Rail kit allows you to fasten the switch to a DIN-Rail. Installing the switch on the DIN-Rail is easy: DIN-Rail Measurement (Unit =mm) Installing the switch on the DIN-rail is easy.
IGPS-9080 Series User Manual 3.2 Wall Mounting Besides Din-rail, the switch can be fixed to the wall via a wall mount panel, which can be found in the package. Wall-Mount Kit Measurement (Unit =mm) To mount the switch onto the wall, follow the steps: 1.
IGPS-9080 Series User Manual 2. Use the switch, with wall mount plates attached, as a guide to mark the correct locations of the four screws. 3. Insert screws through the round screw holes (the red arrow as below) on the sides or through the cross-shaped aperture (the green arrow as below) in the middle of the plate and fasten the screw to the wall with a screwdriver.
IGPS-9080 Series User Manual each wire size. 3. If the current goes above the maximum ratings, the wiring could overheat, causing serious damage to your equipment. 4. Use separate paths to route wiring for power and devices. If power wiring and device wiring paths must cross, make sure the wires are perpendicular at the intersection point.
Page 16
IGPS-9080 Series User Manual hubs). Please refer to the following table for cable specifications. Cable Types and Specifications: Cable Type Max. Length Connector 10BASE-T Cat. 3, 4, 5 100-ohm UTP 100 m (328 ft) RJ-45 100BASE-TX Cat. 5 100-ohm UTP...
Page 17
IGPS-9080 Series User Manual TD-(transmit) RD-(receive) RD+(receive) TD+(transmit) Not used Not used Not used Not used RD-(receive) TD-(transmit) Not used Not used Not used Not used 1000Base-T MDI/MDI-X Pin Assignments: Pin Number MDI port MDI-X port BI_DA+ BI_DB+ BI_DA- BI_DB-...
IGPS-9080 Series User Manual 3.4.2 O-Ring/O-Chain O-Ring You can connect three or more switches to form a ring topology to gain network redundancy capabilities through the following steps. 1. Connect each switch to form a daisy chain using an Ethernet cable.
Page 19
IGPS-9080 Series User Manual select the coupling ring in correspondence to the connected port. For more information on port setting, please refer to 4.1.2 Configurations. Once the setting is completed, one of the connections will act as the main path while the other will act as the backup path.
Page 20
IGPS-9080 Series User Manual O-Chain When connecting multiple O-Rings to meet your expansion demand, you can create an O-Chain topology through the following steps. 1. Select two switches from the chain (Switch A & B) that you want to connect to the O-Ring and connect them to the switches in the ring (Switch C &...
4.1 O-Ring 4.1.1 Introduction O-Ring is ORing's proprietary redundant ring technology, with recovery time of less than 30 milliseconds (in full-duplex Gigabit operation) or 10 milliseconds (in full-duplex Fast Ethernet operation) and up to 250 nodes. The ring protocols identify one switch as the master of the network, and then automatically block packets from traveling through any of the network’s...
Page 22
IGPS-9080 Series User Manual Label Description Check to enable O-Ring topology. Redundant Ring Only one ring master is allowed in a ring. However, if more than one switches are set to enable Ring Master, the switch Ring Master with the lowest MAC address will be the active ring master and the others will be backup masters.
IGPS-9080 Series User Manual 4.2 O-Chain 4.2.1 Introduction O-Chain is ORing’s revolutionary network redundancy technology which enhances network redundancy for any backbone networks, providing ease-of-use and maximum fault-recovery swiftness, flexibility, compatibility, and cost-effectiveness in a set of network redundancy topologies. The self-healing Ethernet technology designed for distributed and complex...
IGPS-9080 Series User Manual Label Description Enable Check to enable O-Chain function Ring Port The first port connecting to the ring Ring Port The second port connecting to the ring Edge Port An O-Chain topology must begin with edge ports. The ports with a smaller switch MAC address will serve as the backup link and RM LED will light up.
IGPS-9080 Series User Manual 4.4 STP/RSTP/MSTP Bridge Settings This page allows you to configure RSTP system settings. The settings are used by all RSTP Bridge instances in the Switch Stack. Label Description The STP protocol version setting. Valid values are STP, RSTP Protocol Version and MSTP.
Page 26
IGPS-9080 Series User Manual MSTI Mapping This page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change them as well. Label Description The name identifiying the VLAN to MSTI mapping. Bridges must share the name and revision (see below), as well as the...
Page 27
IGPS-9080 Series User Manual (I.e. not having any VLANs mapped to it.) Click to save changes. Click to undo any changes made locally and revert to previously saved values. MSTI Priorities This page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change them as well.
Page 28
IGPS-9080 Series User Manual CIST Ports This page allows the user to inspect the current STP CIST port configurations, and possibly change them as well.This page contains settings for physical and aggregated ports. The aggregation settings are stack global. Label...
Page 29
IGPS-9080 Series User Manual If enabled, causes the port not to be selected as Root Port for the CIST or any MSTI, even if it has the best spanning tree priority vector. Such a port will be selected as an Alternate Port after the Root Port has been selected.
Page 30
IGPS-9080 Series User Manual Label Description The switch port number of the corresponding STP CIST (and Port MSTI) port. Controls the path cost incurred by the port. The Auto setting will set the path cost as appropriate by the physical link speed, using the 802.1D recommended values.
Page 31
IGPS-9080 Series User Manual STP Bridges This page provides a status overview for all STP bridge instances. The displayed table contains a row for each STP bridge instance, where the column displays the following information: Label Description The Bridge Instance. This is also a link to the STP Detailed Bridge MSTI Status.
Page 32
IGPS-9080 Series User Manual Label Description Port The switch port number of the logical STP port. The current STP port role of the CIST port. The port role can be CIST Role one of the following values: AlternatePort BackupPort RootPort DesignatedPort.
Fast recovery mode can be set to connect multiple ports to one or more switches. The IGPS-9080 series with fast recovery mode will provide redundant links. Fast recovery mode supports 8 priorities. Only the first priority will be the active port, and the other ports with different priorities will be backup ports.
Page 34
IGPS-9080 Series User Manual Label Description Active Activate fast recovery mode port Ports can be set to 8 priorities. Only the port with the highest priority will be the active port. 1st Priority is the highest. Apply Click to activate the configurations.
IGPS-9080 Series User Manual anagement The switch can be controlled via a built-in web server which supports Internet Explorer (Internet Explorer 5.0 or above versions) and other Web browsers such as Chrome. Therefore, you can manage and configure the switch easily and remotely. You can also upgrade firmware via a Web browser.
IGPS-9080 Series User Manual User Name: admin Password: admin After logging in, you will see the information of the switch as below. On the right hand side of the management interface shows links to various settings. Clicking on the links will bring you to individual configuration pages.
IGPS-9080 Series User Manual convention, this is the node's fully-qualified domain name. A domain name is a text string consisting of alphabets (A-Z, a-z), digits (0-9), and minus sign (-). Space is not allowed to be part of the name. The first character must be an alpha character. And the first or last character must not be a minus sign.
IGPS-9080 Series User Manual Confirm New Re-type the new password. Password Save Click to save changes. 5.1.3 Authentication Methods This page allows you to configure how a user is authenticated when he/she logs into the switch via one of the management interfaces.
IGPS-9080 Series User Manual Label Description Enable the DHCP client by checking this box. If DHCP fails or the configured IP address is zero, DHCP will retry. If DHCP retry fails, DHCP Client DHCP will stop trying and the configured IP settings will be used.
Page 40
IGPS-9080 Series User Manual Label Description Check to enable IPv6 auto-configuration. If the system cannot obtain the stateless address in time, the configured IPv6 settings Auto Configuration will be used. The router may delay responding to a router solicitation for a few seconds; therefore, the total time needed to complete auto-configuration may be much longer.
IGPS-9080 Series User Manual 5.1.6 Daylight Saving Time Time Zone Configuration Label Description Lists various Time Zones world wide. Select appropriate Time Time Zone Zone from the drop down and click Save to set. User can set the acronym of the time zone. This is a User Acronym configurable acronym to identify the time zone.
Page 42
IGPS-9080 Series User Manual Label Description Week Select the starting week number. Select the starting day. Month Select the starting month. Hours Select the starting hour. Minutes Select the starting minute. End Time Settings Label Description Week Select the ending week number.
IGPS-9080 Series User Manual 5.1.7 HTTPS You can configure the HTTPS mode in the following page. Label Description Indicates the selected HTTPS mode. When the current connection is HTTPS, disabling HTTPS will automatically redirect Mode web browser to an HTTP connection. The modes include: Enabled: enable HTTPS.
IGPS-9080 Series User Manual saved values 5.1.9 LLDP LLDP Configurations LLDP (Link Layer Discovery Protocol) provides a method for networked devices to receive and/or transmit their information to other connected devices on the network that are also using the protocols, and to store the information that is learned about other devices. This page allows you to examine and configure current LLDP port settings.
Page 45
IGPS-9080 Series User Manual Label Description Local Port The port that you use to transmits and receives LLDP frames. The identification number of the neighbor sending out the LLDP Chassis ID frames. Remote Port ID The identification of the neighbor port System Name The name advertised by the neighbor.
Page 46
IGPS-9080 Series User Manual Global Counters Label Description Neighbor entries Shows the time when the last entry was deleted or added. were last changed at Total Neighbors Shows the number of new entries added since switch reboot Entries Added Total Neighbors...
IGPS-9080 Series User Manual received, or when the entry ages out. Each LLDP frame can contain multiple pieces of information, TLVs Discarded known as TLVs (Type Length Value). If a TLV is malformed, it will be counted and discarded. TLVs Unrecognized The number of well-formed TLVs, but with an unknown type value Org.
IGPS-9080 Series User Manual 5.1.12 Firmware Update This page allows you to update the firmware of the switch. 5.2 DHCP Server The switch provides DHCP server functions. By enabling DHCP, the switch will become a DHCP server and dynamically assigns IP addresses and related IP information to network clients.
IGPS-9080 Series User Manual 5.2.2 Dynamic Client List When DHCP server functions are activated, the switch will collect DHCP client information and display in the following table. You can select the entries and add them to a static table by clicking Add to static Table.
IGPS-9080 Series User Manual 5.2.4 Relay Agent DHCP relay is used to forward and transfer DHCP messages between the clients and the server when they are not in the same subnet domain. You can configure the function in this page.
Page 51
IGPS-9080 Series User Manual a DHCP client. It only works when DHCP relay mode is enabled. Disabled: disable DHCP relay information Relay Information Indicates the policies to be enforced when receiving DHCP relay Policy information. When DHCP relay information mode is enabled, if the agent receives a DHCP message that already contains relay agent information, it will enforce the policy.
IGPS-9080 Series User Manual Label Description Transmit to Client The number of packets relayed from the server to the client Transmit Error The number of packets with errors when being sent to servers Receive from Client The number of packets received from the server...
Page 53
IGPS-9080 Series User Manual Label Description The switch port number to which the following settings will be Port applied. The current link state is shown by different colors. Green indicates Link the link is up and red means the link is down.
IGPS-9080 Series User Manual 5.3.2 Port Trunk A port trunk is a group of ports that have been grouped together to function as one logical path. This method provides an economical way for you to increase the bandwidth between the switch and another networking device.
Page 55
IGPS-9080 Series User Manual Label Description Group ID Indicates the ID of each aggregation group. Normal means no aggregation. Only one group ID is valid per port. Port Members Lists each switch port for each group ID. Select a radio button to include a port in an aggregation, or clear the radio button to remove the port from the aggregation.
Page 56
IGPS-9080 Series User Manual LACP Enabled Lists each switch port for each group ID. Check to include a port in an aggregation, or clear the box to remove the port from the aggregation. By default, no ports belong to any aggregation group. Only full duplex ports can join an aggregation and the ports must be in the same speed in each group.
Page 57
IGPS-9080 Series User Manual LACP Status This page provides an overview of the LACP status for all ports. Label Description Port Switch port number LACP (Yes) means LACP is enabled and the port link is up. (No) means LACP is not enabled or the port link is down. (Backup) means the port cannot join in the aggregation group unless other ports are removed.
IGPS-9080 Series User Manual Label Description Port Switch port number LACP Transmitted The number of LACP frames sent from each port LACP Received The number of LACP frames received at each port Discarded The number of unknown or illegal LACP frames discarded at each port.
IGPS-9080 Series User Manual Transmission Time The interval between each loop protection PDU sent on each port. The valid value is 1 to 10 seconds. Shutdown Time The period (in seconds) for which a port will be kept disabled when a loop is detected (shutting down the port). The valid value is 0 to 604800 seconds (7 days).
IGPS-9080 Series User Manual Label Description Delete Check to delete the entry. It will be deleted during the next save. VLAN ID The VLAN ID for the entry MAC Address The MAC address for the entry Checkmarks indicate which ports are members of the entry.
Page 61
IGPS-9080 Series User Manual Label Description Ethertype for This field specifies the Ether type used for custom S-ports. This is customer S-Ports a global setting for all custom S-ports. The switch port number to which the following settings will be Port applied.
IGPS-9080 Series User Manual The allowed values are None or Specific. This parameter affects VLAN ingress and egress processing. If None is selected, a VLAN tag with the classified VLAN ID is inserted in frames transmitted on the port. This mode is normally used for ports connected to VLAN-aware switches.
Page 63
IGPS-9080 Series User Manual and is forwarded. will be set to 0x8100. When the port receives tagged frames: 1. If the tagged frame contains a TPID of 0x8100, it will be forwarded. 2. If the TPID of tagged frame is not 0x8100 (ex.
Page 64
IGPS-9080 Series User Manual ORing Industrial Networking Corp...
Page 65
IGPS-9080 Series User Manual ORing Industrial Networking Corp...
IGPS-9080 Series User Manual Examples of VLAN Settings VLAN Access Mode: Switch Port 7 is VLAN Access mode = Untagged 20 Port 8 is VLAN Access mode = Untagged 10 Below are the switch settings. ORing Industrial Networking Corp...
Page 67
IGPS-9080 Series User Manual VLAN 1Q Trunk Mode: Switch Port 1 = VLAN 1Qtrunk mode = tagged 10, 20 Port 2 = VLAN 1Qtrunk mode = tagged 10, 20 Below are the switch settings. ORing Industrial Networking Corp...
Page 68
IGPS-9080 Series User Manual VLAN Hybrid Mode: Port 1 VLAN Hybrid mode = untagged 10 Tagged 10, 20 Below are the switch settings. ORing Industrial Networking Corp...
Page 69
IGPS-9080 Series User Manual VLAN QinQ Mode: VLAN QinQ mode is usually adopted when there are unknown VLANs, as shown in the figure below VLAN “X” = Unknown VLAN 9000 Series Port 1 VLAN Settings: VLAN ID Settings When setting the management VLAN, only the same VLAN ID port can be used to control the switch.
IGPS-9080 Series User Manual 9000 Series VLAN Settings: 5.4.3 Private VLAN A private VLAN contains switch ports that can only communicate with a given "uplink". The restricted ports are called private ports. Each private VLAN typically contains many private ports and a single uplink. The switch forwards all frames received on a private port out the uplink port, regardless of VLAN ID or destination MAC address.
IGPS-9080 Series User Manual VLAN. To remove or exclude the port from the private VLAN, make sure the box is unchecked. By default, no ports are members, and all boxes are unchecked. Click Add new Private VLAN to add a new private VLAN ID. An empty row is added to the table, and the private VLAN can be configured as needed.
IGPS-9080 Series User Manual networked devices. In an event-triggered situation, traps and notifications will be sent to administrators. 5.5.1 SNMP System Configurations Label Description Indicates existing SNMP mode. Possible modes include: Mode Enabled: enable SNMP mode Disabled: disable SNMP mode Indicates the supported SNMP version.
Page 73
IGPS-9080 Series User Manual Label Description Indicates existing SNMP trap mode. Possible modes include: Trap Mode Enabled: enable SNMP trap mode Disabled: disable SNMP trap mode Indicates the supported SNMP trap version. Possible versions include: Trap Version SNMP v1: supports SNMP trap version 1...
IGPS-9080 Series User Manual Disabled: disable SNMP trap authentication failure Indicates the SNMP trap link-up and link-down mode. Possible Trap Link-up and modes include: Link-down Enabled: enable SNMP trap link-up and link-down mode Disabled: disable SNMP trap link-up and link-down mode Indicates the SNMP trap inform mode.
Page 75
IGPS-9080 Series User Manual Each SNMP user has a specified username, a group to which the user belongs, authentication password, authentication protocol, privacy protocol, and privacy password. When you create a user, you must associate it with an SNMP group. The user then inherits the security model of the group.
IGPS-9080 Series User Manual Protocol Possible authentication protocols include: None: no authentication protocol MD5: an optional flag to indicate that this user is using MD5 authentication protocol SHA: an optional flag to indicate that this user is using SHA authentication protocol...
IGPS-9080 Series User Manual Label Description Delete Check to delete the entry. It will be deleted during the next save. Indicates the security model that this entry should belong to. Possible security models included: Security Model v1: Reserved for SNMPv1.
IGPS-9080 Series User Manual Delete Check to delete the entry. It will be deleted during the next save. A string identifying the view name that this entry should belong to. View Name The allowed string length is 1 to 32, and only ASCII characters from 33 to 126 are allowed.
IGPS-9080 Series User Manual security models include: NoAuth, NoPriv: no authentication and no privacy Auth, NoPriv: Authentication and no privacy Auth, Priv: Authentication and privacy The name of the MIB view defining the MIB objects for which this Read View Name request may request the current values.
IGPS-9080 Series User Manual The rate is packet per second (pps), configure the rate as 1K, 2K, Rate 4K, 8K, 16K, 32K, 64K, 128K, 256K, 512K, or 1024K. The 1 kpps is actually 1002.1 pps. 5.6.2 Port Classification QoS (Quality of Service) is a method to achieve efficient bandwidth utilization between devices by prioritizing frames according to individual requirements and transmit the frames based on their importance.
Page 81
IGPS-9080 Series User Manual If the port is VLAN aware, the frame is tagged, and Tag Class is enabled, then the frame is classified to a QoS class that is mapped from the PCP and DEI value in the tag. Otherwise the frame is classified to the default QoS class.
IGPS-9080 Series User Manual 5.6.3 Port Tag Remaking You can set QoS egress queues on a port such as classifying data and marking it according to its priority and the policies. Packets will then travel across the switch’s internal paths carrying their assigned QoS tag markers.
Page 83
IGPS-9080 Series User Manual Label Description Shows the list of ports for which you can configure DSCP Ingress Port and Egress settings. In Ingress settings you can change ingress translation and classification settings for individual ports. There are two configuration parameters available in Ingress:...
IGPS-9080 Series User Manual Translation->Egress Remap DP0' table. Remap DP Aware: DSCP from the analyzer is remapped and the frame is remarked with a remapped DSCP value. Depending on the DP level of the frame, the remapped DSCP value is either taken from the 'DSCP Translation->Egress Remap DP0' table or...
IGPS-9080 Series User Manual Configures the unit of measurement for each policer rate as kbps, Unti Mbps, fps, or kfps. The default value is kbps. If Flow Control is enabled and the port is in Flow Control mode, Flow Control then pause frames are sent instead of being discarded.
Page 86
IGPS-9080 Series User Manual the received packets contain high priority data, such as voice and video. Label Description Scheduler Mode Two scheduling modes are available: Strict Priority or Weighted Queue Shaper Check to enable queue shaper for individual switch ports Enable Configures the rate of each queue shaper.
Page 87
IGPS-9080 Series User Manual Configures the rate of each port shaper. The default value is 500 Port Shaper Rate This value is restricted to 100 to 1000000 when the Unit is kbps, and it is restricted to 1 to 3300 when the Unit is Mbps.
IGPS-9080 Series User Manual Enable Configures the rate of each queue shaper. The default value is Queue Shaper Rate 500. This value is restricted to 100 to 1000000 when the Unit is kbps, and it is restricted to 1 to 3300 when the Unit is Mbps.
IGPS-9080 Series User Manual 5.6.9 Port Shaping Port shaping enables you to limit traffic on a port, thereby controlling the amount of traffic passing through the port. With port shaping, you can shape the aggregate traffic through an interface to a rate that is less than the line rate for that interface. When configuring port shaping on an interface, you specify a value indicating the maximum amount of traffic allowable for the interface.
IGPS-9080 Series User Manual precedence level. Frames with untrusted DSCP values are treated as a non-IP frame. QoS Class QoS class value can be any number from 0-7. Drop Precedence Level (0-1) 5.6.11 DSCP Translation This page allows you to configure basic QoS DSCP translation settings for all switches. DSCP translation can apply to Ingress or Egress.
IGPS-9080 Series User Manual DSCP value ranges from 0 to 63. Remap DP1: Re-maps DP1 field to selected DSCP value. DP1 indicates a drop precedence with a high priority. You can select the DSCP value from a selected menu to which you want to remap.
Page 92
IGPS-9080 Series User Manual Label Description Port Members Check to include the port in the QCL entry. By default, all ports are included. Key Parameters Key configurations include: Tag: value of tag, can be Any, Untag or Tag. VID: valid value of VLAN ID from 1 to 4095 Any: can be a specific value or a range of VIDs.
Page 93
IGPS-9080 Series User Manual excluding 0x800(IPv4) and 0x86DD(IPv6). The default value is Any. SSAP Address: valid SSAP (Source Service Access Point) values can range from 0x00 to 0xFF or Any. The default value is Any. DSAP Address: valid DSAP (Destination Service Access Point) values can range from 0x00 to 0xFF or Any.
IGPS-9080 Series User Manual Valid DSCP value can be (0-63, BE, CS1-CS7, EF or AF11-AF43) or Default. Default means that the default classified value is not modified by this QCE. 5.6.14 QoS Counters This page shows information on the number of packets sent and received at each queue.
IGPS-9080 Series User Manual Label Description User Indicates the QCL user QCE# Indicates the index of QCE Indicates the type of frame to look for incoming frames. Possible frame types are: Any: the QCE will match all frame type. Ethernet: Only Ethernet frames (with Ether Type 0x600-0xFFFF) Frame Type are allowed.
IGPS-9080 Series User Manual This page allows you to set up IGMP snooping configurations. Label Description Snooping Enabled Check to enable global IGMP snooping Unregistered IPMCv4Flooding Check to enable unregistered IPMC traffic flooding enabled Specifies which ports act as router ports. A router port is a port on the...
IGPS-9080 Series User Manual VLAN table. The first displayed will be the one with the lowest VLAN ID found in the VLAN Table. The VLAN field allows the user to select the starting point in the VLAN Table. Clicking Refresh will update the displayed table starting from that or the next closest VLAN Table match.
IGPS-9080 Series User Manual Label Description VLAN ID The VLAN ID of the entry Querier Version Active Querier version Host Version Active Host version Querier Status Shows the Querier status as ACTIVE or IDLE Querier Receive The number of transmitted Querier...
IGPS-9080 Series User Manual Label Description VLAN ID The VLAN ID of the group Groups The group address of the group displayed Port Members Ports under this group 5.8 Security 5.8.1 Remote Control Security Configurations Remote Control Security allows you to limit remote access to the management interface.
IGPS-9080 Series User Manual 5.8.2 Device Binding Device binding is ORing's proprietary technology which binds the IP/MAC address of a device with a specified Ethernet port. If the IP/MAC address of the device connected to the Ethernet port does not conform to the binding requirements, the device will be locked for security concerns.
Page 101
IGPS-9080 Series User Manual Low: the stream is getting low. DDoS Prevention Check to enable DDOS prevention. When enabled, the switch will Acton monitor the device against DDOS attacks. Indicates DDOS prevention status. Possible statuses are: ---: disable DDoS Prevention...
Page 102
IGPS-9080 Series User Manual Label Description Link Change Disables or enables the port Only log it Simply sends logs to the log server Shunt Down the Disables the port Port Reboot Device Disables or enables PoE power DDoS Prevention The switch can monitor ingress packets, and perform actions when DDoS attack occurred on this port.
Page 103
IGPS-9080 Series User Manual Low: low sensibility Normal: normal sensibility Medium: medium sensibility High: high sensibility Indicates the types of DDoS attack packets to be monitored. Possible types are: RX Total: all ingress packets RX Unicast: unicast ingress packets Packet Type...
Page 104
IGPS-9080 Series User Manual Device Description This page allows you to configure device description settings. Label Description Indicates device types. Possible types are: ---: no specification IP Camera IP Phone Device Type Access Point Network Video Recorder Indicates location information of the device. The information can be Location Address used for Google Mapping.
IGPS-9080 Series User Manual Label Description Mode Enables or disables stream monitoring of the port Indicates the action to take when the stream gets low. Possible actions are: Action ---: no action Log it: simply logs the event 5.8.3 ACL An ACL (Access Control List) is a list of permissions attached to an object.
Page 106
IGPS-9080 Series User Manual Label Description Port The switch port number to which the following settings will be applied Select to apply a policy to the port. The allowed values are 1 to 8. Policy ID The default value is 1.
Page 107
IGPS-9080 Series User Manual Label Description Rate Limiter ID The rate limiter ID for the settings contained in the same row. The rate unit is packet per second (pps), which can be configured as 1, 2, 4, 8, 16, 32, 64, 128, 256, 512, 1K, 2K, 4K, 8K, 16K, 32K, 64K, Rate 128K, 256K, 512K, or 1024K.
Page 108
IGPS-9080 Series User Manual will not match the ACE with Ethernet type. Specifies the action to take when a frame matches the ACE. Action Permit: takes action when the frame matches the ACE. Deny: drops the frame matching the ACE.
Page 109
IGPS-9080 Series User Manual value. Specifies the destination MAC filter for this ACE Any: no DMAC filter is specified (DMAC filter status is "don't-care"). MC: frame must be multicast. BC: frame must be broadcast. DMAC Filter UC: frame must be unicast.
Page 110
IGPS-9080 Series User Manual Label Description Specifies the IP protocol filter for the ACE Any: no IP protocol filter is specified ("don't-care"). Specific: if you want to filter a specific IP protocol filter with the ACE, choose this value. A field for entering an IP protocol filter appears.
Page 111
IGPS-9080 Series User Manual greater than zero must not be able to match this entry. Yes: IPv4 frames whose MF bit is set or the FRAG OFFSET field is greater than zero must be able to match this entry. Any: any value is allowed ("don't-care").
Page 112
IGPS-9080 Series User Manual Label Description Specifies the available ARP/RARP opcode (OP) flag for the ACE Any: no ARP/RARP OP flag is specified (OP is "don't-care"). ARP/RARP ARP: frame must have ARP/RARP opcode set to ARP RARP: frame must have ARP/RARP opcode set to RARP.
Page 113
IGPS-9080 Series User Manual address and target IP mask in the Target IP Address and Target IP Mask fields that appear. When Host or Network is selected for the target IP filter, you can Target IP Address enter a specific target IP address in dotted decimal notation.
Page 114
IGPS-9080 Series User Manual Any: any value is allowed ("don't-care"). Label Description Specifies the ICMP filter for the ACE Any: no ICMP filter is specified (ICMP filter status is "don't-care"). ICMP Type Filter Specific: if you want to filter a specific ICMP filter with the ACE, you can enter a specific ICMP value.
Page 115
IGPS-9080 Series User Manual Label Description Specifies the TCP/UDP source filter for the ACE Any: no TCP/UDP source filter is specified (TCP/UDP source filter status is "don't-care"). Specific: if you want to filter a specific TCP/UDP source filter with the TCP/UDP Source ACE, you can enter a specific TCP/UDP source value.
Page 116
IGPS-9080 Series User Manual filter with the ACE, you can enter a specific TCP/UDP destination range. A field for entering a TCP/UDP destination value appears. When Specific is selected for the TCP/UDP destination filter, you TCP/UDP can enter a specific TCP/UDP destination value. The allowed range Destination is 0 to 65535.
IGPS-9080 Series User Manual Specifies the TCP URG ("urgent pointer field significant") value for the ACE 0: TCP frames where the URG field is set must not be able to match TCP URG this entry. 1: TCP frames where the URG field is set must be able to match this entry.
Page 118
IGPS-9080 Series User Manual Setting the dead time to a value greater than 0 (zero) will enable this feature, but only if more than one server has been configured. 5.8.5 RADIUS Authentication and Accounting Server When a user requests network connection, a RADIUS client which receives the request will perform an initial access negotiation with the user to obtain identity/password information.
IGPS-9080 Series User Manual RADIUS authentication server. The router encrypts PPP PAP passwords using this text string. The secret - up to 29 characters long - shared between the RADIUS authentication server and the switch stack. Label Description The RADIUS accounting server number for which the configuration below applies.
Page 120
IGPS-9080 Series User Manual Label Description The RADIUS server number. Click to navigate to detailed statistics of the server The IP address and UDP port number (in <IP Address>:<UDP Port> IP Address notation) of the server The current status of the server. This field has one of the following values: Disabled: the server is disabled.
IGPS-9080 Series User Manual the server The IP address and UDP port number (in <IP Address>:<UDP Port> IP Address notation) of the server The current status of the server. This field has one of the following values: Disabled: the server is disabled.
Page 122
IGPS-9080 Series User Manual This section contains information about the state of the server and the latest round-trip time. Other Info Label Description RADIUS accounting server packet counters. There are five ‘receive’ Packet Counters four ‘transmit’ counters. ORing Industrial Networking Corp...
IGPS-9080 Series User Manual This section contains information about the state of the server and the latest round-trip time. Other Info 5.8.6 NAS (802.1x) A NAS (Network Access Server) is an access gateway between an external communications network and an internal network. For example, when the user dials into the ISP, he/she will be given access to the Internet after being authorized by the access server.
Page 124
IGPS-9080 Series User Manual man-in-the-middle, forwarding requests and responses between the supplicant and the authentication server. Frames sent between the supplicant and the switch are special 802.1X frames, known as EAPOL (EAP Over LANs) frames which encapsulate EAP PDUs (RFC3748).
Page 125
IGPS-9080 Series User Manual There are no EAPOL frames involved in this authentication, and therefore, MAC-based authentication has nothing to do with the 802.1X standard. The advantage of MAC-based authentication over 802.1X is that several clients can be connected to the same port (e.g. through a 3rd party switch or a hub) and still require individual authentication, and that the clients do npt need special supplicant software to authenticate.
Page 126
IGPS-9080 Series User Manual RADIUS server configuration has changed. It does not involve communication between the switch and the client, and therefore does not imply that a client is still present on a port (see Age Period below). Determines the period, in seconds, after which a connected client...
Page 127
IGPS-9080 Series User Manual seconds. Port The port number for which the configuration below applies If NAS is globally enabled, this selection controls the port's authentication mode. The following modes are available: Force Authorized In this mode, the switch will send one EAPOL Success frame when the port link is up, and any client on the port will be allowed network access without authentication.
Page 128
IGPS-9080 Series User Manual the server timeout is configured to X seconds (using the authentication configuration page), and the first server in the list is currently down (but not considered dead), if the supplicant retransmits EAPOL Start frames at a rate faster than X seconds, it...
Page 129
IGPS-9080 Series User Manual instance through a hub) to piggy-back on the successfully authenticated client and get network access even though they are not authenticated individually. To overcome this security breach, use the Multi 802.1X variant. Multi 802.1X is not yet an IEEE standard, but features many of the same characteristics as port-based 802.1X.
Page 130
IGPS-9080 Series User Manual success or failure indication, which in turn causes the switch to open up or block traffic for that particular client, using the Port Security module. Only then will frames from the client be forwarded on the switch. There are no EAPOL frames involved in this authentication, and therefore, MAC-based authentication has nothing to do with the 802.1X standard.
Page 131
IGPS-9080 Series User Manual quiet-period of the port runs out (EAPOL-based authentication). For MAC-based authentication, reauthentication will be attempted immediately. The button only has effect on successfully authenticated clients on the port and will not cause the clients to be temporarily unauthorized.
Page 132
IGPS-9080 Series User Manual This page provides detailed IEEE 802.1X statistics for a specific switch port using port-based authentication. For MAC-based ports, only the statistics of selected backend server statistics will be shown. Use the drop-down list to select which port details to be displayed.
IGPS-9080 Series User Manual Information about the last supplicant/client that attempts to authenticate. This information available for following administrative states: • 802.1X • MAC-based Auth. Last Supplicant/Client Info 5.9 Alerts 5.9.1 Fault Alarm When any selected fault event happens, the Fault LED on the switch panel will light up and the electric relay will signal at the same time.
IGPS-9080 Series User Manual 5.9.2 System Warning SYSLOG Setting SYSLOG is a protocol that allows a device to send event notification messages across IP networks to event message collectors. It permits separation of the software that generates messages from the system that stores them and the software that reports and analyzes them.
Page 135
IGPS-9080 Series User Manual always be sent even if the syslog server does not exist. Possible modes are: Enabled: enable server mode Disabled: disable server mode SYSLOG Server IP Address Indicates the IPv4 host address of syslog server. If the switch provides DNS functions, it also can be a host name.
Page 136
IGPS-9080 Series User Manual Help Shows help file Event Selection The device supports both SYSLOG and SMTP alerts. Check the corresponding box to enable the system event warning method you want. Please note that the checkboxes will gray out if SYSLOG or SMTP is disabled.
IGPS-9080 Series User Manual 5.10 Monitor and Diag 5.10.1 MAC Table A MAC address tablet is a table in a network switch that maps MAC addresses to ports. The switch uses the table to determine which port the incoming packet should be forwarded to.
Page 138
IGPS-9080 Series User Manual the address does not exist in the table by examining the source address of each packet received on a port. This is called learning. It allows the MAC table to expand dynamically. If the learning mode for a given port is grayed out, it means another module is in control of the mode, and thus the user cannot change the configurations.
Page 139
IGPS-9080 Series User Manual Label Description Delete Check to delete an entry. It will be deleted during the next save. VLAN ID The VLAN ID for the entry MAC Address The MAC address for the entry Checkmarks indicate which ports are members of the entry.
IGPS-9080 Series User Manual MAC address The MAC address of the entry VLAN The VLAN ID of the entry Port Members The ports that are members of the entry. 5.10.2 Port Statistics Traffic Overview This page provides an overview of general traffic statistics for all switch ports.
Page 141
IGPS-9080 Series User Manual Label Description Rx and Tx Packets The number of received and transmitted (good and bad) packets The number of received and transmitted (good and bad) bytes, Rx and Tx Octets including FCS, except framing bits The number of received and transmitted (good and bad) unicast...
IGPS-9080 Series User Manual Rx Undersize The number of short frames received with a valid CRC Rx Oversize The number of long frames received with a valid CRC Rx Fragments The number of short frames received with an invalid CRC...
IGPS-9080 Series User Manual Rx only: only frames received on this port are mirrored to the mirror port. Frames transmitted are not mirrored. Tx only: only frames transmitted from this port are mirrored to the mirror port. Frames received are not mirrored.
IGPS-9080 Series User Manual Clear Flushes all system log entries |<< Updates system log entries, starting from the first available entry ID Updates system log entries, ending at the last entry currently << displayed Updates system log entries, starting from the last entry currently >>...
IGPS-9080 Series User Manual 5.10.6 SFP Monitor SFP modules with DDM (Digital Diagnostic Monitoring) function can measure the temperature of the apparatus, helping you monitor the status of connection and detect errors immediately. You can manage and set up event alarms through DDM Web interface.
IGPS-9080 Series User Manual 64 bytes from ::10.10.132.20: icmp_seq=0, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=1, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=2, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=3, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=4, time=0ms Sent 5 packets, received 5 OK, 0 bad...
Page 147
IGPS-9080 Series User Manual Label Description One_pps_mode The box allows you to select One_pps_mode configurations. The following values are possible: Output: enable the 1 pps clock output Input: enable the 1 pps clock input Disable: disable the 1 pps clock in/out-put External Enable The box allows you to configure external clock output.
Page 148
IGPS-9080 Series User Manual Delete Check this box and click Save to delete the clock instance Clock Instance Indicates the instance of a particular clock instance [0..3] Click on the clock instance number to edit the clock details Device Type Indicates the type of the clock instance.
IGPS-9080 Series User Manual 5.12 PoE 5.12.1 Configurations PoE (Power Over Ethernet) is a technology that transmits electrical power to devices such as IP telephones, wireless LAN access points, and IP cameras over standard Ethernet cables. The ability is very useful in places where power supply is difficult or expensive deploy.
Page 150
IGPS-9080 Series User Manual will gray out. In all of the abovementioned modes, if a port uses more power than the reserved power for the port, the port is shut down. Power Management There are two modes available when configuring when to shut...
IGPS-9080 Series User Manual highest port number. Maximum Power Indicates the maximum power in watts that can be delivered to a remote device (the maximum allowed value is 30 W). 5.12.2 Status This page allows you to examine the current status for all PoE ports.
IGPS-9080 Series User Manual PoE turned OFF: power budget exceeded. The total requested or used power by the power devices exceeds the maximum power the power supply can deliver, and port(s) with the lowest priority will be powered down. No PD detected: no power devices detected on the port PoE turned OFF: power devices overload.
Page 153
IGPS-9080 Series User Manual Label Description Click to reboot device Click to return to the Port State page without rebooting ORing Industrial Networking Corp...
IGPS-9080 Series User Manual ommand Line Management Besides Web-based management, the device also supports CLI management. You can use console or telnet to manage the switch by CLI. CLI Management by RS-232 Serial Console (115200, 8, none, 1, none) Before configuring RS-232 serial console, connect the RS-232 port of the switch to your PC Com port using a RJ45 to DB9-F cable.
Page 155
IGPS-9080 Series User Manual Step 3. Select a COM port in the drop-down list. Step 4. A pop-up window that indicates COM port properties appears, including bits per second, data bits, parity, stop bits, and flow control. ORing Industrial Networking Corp...
Page 156
IGPS-9080 Series User Manual Step 5. The console login screen will appear. Use the keyboard to enter the Username and Password (same as the password for Web browsers), then press Enter. CLI Management by Telnet You can can use TELNETto configure the switch. The default values are: IP Address: 192.168.10.1...
Page 157
IGPS-9080 Series User Manual Default Gateway: 192.168.10.254 User Name: admin Password: admin Follow the steps below to access console via Telnet. Step 1. Telnet to the IP address of the switch from the Run window by inputingcommands (or from the MS-DOS prompt) as below.
Page 158
IGPS-9080 Series User Manual Commander Groups ORing Industrial Networking Corp...
Page 161
IGPS-9080 Series User Manual Authentication, Authorization and Accounting setting Security Switch Password <password> Auth Authentication Secure Shell Security/switch> HTTPS Hypertext Transfer Protocol over Secure Socket Layer RMON Remote Network Monitoring Security Switch Authentication Configuration Security/switch/auth> Method [console|telnet|ssh|web] [none|local|radius] [enable|disable] Security Switch SSH Configuration Security/switch/ssh>...
Page 162
IGPS-9080 Series User Manual Security Network Psec Port Security Status Network Access Server (IEEE 802.1X) Security/Network> Access Control List DHCP Dynamic Host Configuration Protocol Security Network Psec Switch [<port_list>] Security/Network/Psec> Port [<port_list>] Security Network NAS Configuration [<port_list>] Mode [enable|disable] State [<port_list>] [auto|authorized|unauthorized|macbased] Reauthentication [enable|disable] ReauthPeriod [<reauth_period>]...
Page 163
IGPS-9080 Series User Manual [<ip_flags>]) | (udp [<sip>] [<dip>] [<sport>] [<dport>] [<ip_flags>]) | (tcp [<sip>] [<dip>] [<sport>] [<dport>] [<ip_flags>] [<tcp_flags>])] [permit|deny] [<rate_limiter>] [<port_redirect>] [<mirror>] [<logging>][<shutdown>] Delete <ace_id> Lookup [<ace_id>] Clear Status [combined|static|loop_protect|dhcp|ptp|ipmc|conflicts] Port State [<port_list>] [enable|disable] Security Network DHCP Configuration Mode [enable|disable] Server [<ip_addr>]...
Page 164
IGPS-9080 Series User Manual MaxAge [<max_age>] FwdDelay [<delay>] bpduFilter [enable|disable] bpduGuard [enable|disable] recovery [<timeout>] CName [<config-name>] [<integer>] Status [<msti>] [<port_list>] Msti Priority [<msti>] [<priority>] Msti Map [<msti>] [clear] Msti Add <msti> <vid> Port Configuration [<port_list>] Port Mode [<port_list>] [enable|disable] Port Edge [<port_list>] [enable|disable] Port AutoEdge [<port_list>] [enable|disable]...
Page 165
IGPS-9080 Series User Manual Role [<port_list>] [active|passive] Status [<port_list>] Statistics [<port_list>] [clear] LLDP Configuration [<port_list>] Mode [<port_list>] [enable|disable] LLDP> Statistics [<port_list>] [clear] Info [<port_list>] Configuration [<port_list>] Mode [<port_list>] [disabled|poe|poe+] Priority [<port_list>] [low|high|critical] PoE> Mgmt_mode [class_con|class_res|al_con|al_res|lldp_res|lldp_con] Maximum_Power [<port_list>] [<port_power>] Status Primary_Supply [<supply_power>] DSCP Map [<dscp_list>] [<class>] [<dpl>]...
Page 168
IGPS-9080 Series User Manual Trap Probe Security Engine ID [enable|disable] Trap Security Engine ID [<engineid>] Trap Security Name [<security_name>] Engine ID [<engineid>] Community Add <community> [<ip_addr>] [<ip_mask>] Community Delete <index> Community Lookup [<index>] User Add <engineid> <user_name> [MD5|SHA] [<auth_password>] [DES] [<priv_password>]...
Page 172
IGPS-9080 Series User Manual Port DDOS Sensibility [<port_list>] [low|normal|medium|high] Port DDOS Packet [<port_list>] [rx_total|rx_unicast|rx_multicast|rx_broadcast|tcp|udp] Port DDOS Low [<port_list>] [<socket_number>] Port DDOS High [<port_list>] [<socket_number>] Port DDOS Filter [<port_list>] [source|destination] Port DDOS Action [<port_list>] [do_nothing|block_1_min|block_10_mins|block|shutdown|only_log|reboot _device] Port DDOS Status [<port_list>] Port Alive Mode [<port_list>] [enable|disable] Port Alive Action [<port_list>]...
Page 173
IGPS-9080 Series User Manual Parameter MRP_LNKdownT [<value>] Parameter MRP_LNKupT [<value>] Parameter MRP_LNKNRmax [<value>] Modbus Status Modbus> Mode [enable|disable] ORing Industrial Networking Corp...
Page 174
IGPS-9080 Series User Manual echnical Specifications IGPS-9080 IGPS-9080-NP ORing Switch Model IGPS-9080-24V IGPS-9080-NP-24V (Preliminary) (Prelimenary) Physical Ports 10/100/1000Base-T(X) with P.S.E. Ports in RJ45 Auto MDI/MDIX Technology IEEE 802.3 for 10Base-T IEEE 802.3u for 100Base-TX IEEE 802.3ab for 1000Base-T IEEE 802.3x for Flow control IEEE 802.3ad for LACP (Link Aggregation Control Protocol )
Page 175
IGPS-9080 Series User Manual Ring Master Indicator (R.M.) Green : Indicates that the system is operating in O-Ring Master mode Green : Indicates that the system operating in O-Ring mode O-Ring Indicator (Ring) Green Blinking : Indicates that the Ring is broken.
Need help?
Do you have a question about the IGPS-9080 and is the answer not in the manual?
Questions and answers